SharePoint 2010 Intranet Case Study Presented by Peter Carson - PowerPoint PPT Presentation

SharePoint 2010 Intranet Case Study Presented by Peter Carson President, Envision IT

Peter Carson • President, Envision IT • Virtual Technical Specialist, Microsoft Canada • Computer Engineering, UW • peter@envisionit.com • http://blog.petercarson.ca • www.envisionit.com • Linked in, Facebook, Twitter

Agenda • Envision IT Overview • Microsoft SharePoint • Envision IT Intranet

Envision IT Overview • Envision IT is a privately held, best-of-breed web development company located at 7145 West Credit Avenue, Mississauga, Ontario – adjacent to Microsoft Canada Headquarters. • Incorporated as PCC Limited in 1988 as a Computer Software Consulting company, PCC Limited was officially renamed Envision IT Inc. June 25th, 2004. • Envision IT joined the Microsoft Partner Program in 1997 and was one of the first Microsoft Gold Certified partners in Canada.

Our Focus Focused on complex SharePoint solutions, Envision IT is the “go - to” partner for Microsoft SharePoint. We build integrated public web sites, Intranets, Collaboration Portals, Extranets, and Custom Web Applications that leverage your existing systems anywhere over the Internet. Supporting our SharePoint services practice:  SharePoint Products: Extranet User Manager, Silverlight Image Manager, Photo Viewer, Image Rotator  Custom .NET Development and Business Process Automation  Business Intelligence  Business Productivity Training

Community Leadership

Microsoft SharePoint 2010 The Business Collaboration Platform for the Enterprise and the Web

Microsoft SharePoint 2010 Ribbon UI SharePoint Workspace SharePoint Mobile Business Connectivity Services Office Client and Office Web App Integration InfoPath Form Services Standards Support External Lists Workflow SharePoint Designer Visual Studio Tagging, Tag Cloud, Ratings API Enhancements Social Bookmarking REST/ATOM/RSS Blogs and Wikis My Sites Activity Feeds Profiles and Expertise PerformancePoint Services Org Browser Excel Services Chart Web Part Visio Services Web Analytics SQL Server Integration List Enhancements PowerPivot Audio and Video Content Types Enterprise Content Types Metadata and Navigation Social Relevance Document Sets Phonetic Search Document IDs Navigation Multi-stage Disposition FAST Integration Records Enhanced Pipeline

Envision IT Intranet • Vision and Goals for the project • Logical Design • Service Architecture • Physical Architecture • Security Plan • Authentication • Enterprise Content Management (Document Management and Web Content Management) • Social Computing (Profile Import, My Sites, Tagging, Wikis, and Blogs) • BCS connection to Dynamics CRM 4.0 • Managed Metadata • Enterprise Search (SharePoint People Search, FAST Search with refiners and document previewers) • Office Web Applications and multi-authoring

Vision and Goals To provide a single collaborative place available inside and outside our network where our staff, clients, and partners have access to all information relevant to their role. • Branded SharePoint 2010 experience across Intranet, Client, and personal sites • Communication, document management, and social • Common navigation for all areas • Single launch point for all systems

Logical Design

Service Applications in SharePoint 2010 SKU Service application SharePoint Foundation 2010 Business Data Connectivity Services Usage and Health Data Collection Microsoft SharePoint Foundation Subscription Settings Service SharePoint 2010 Standard Managed Metadata Service Search Service Secure Store Service State Service User Profile Service Word Automation Services SharePoint 2010 Enterprise Access Services Excel Services PerformancePoint Service Application PowerPoint Visio Graphics Service Web Analytics Additional Office Web Application Services: Word Viewing Service PowerPoint Service Excel Calculation Services Microsoft Project Server 2010

Service Application Dependencies Service Dependent on Business Connectivity Services Secure Store Service Subscription Settings Service Excel Services Secure Store Service Managed Metadata Service Subscription Settings Service PerformancePoint Services Secure Store Service State Service Enterprise Search Business Connectivity Services User Profile Service Subscription Settings Service Secure Store Service Subscription Settings Service User Profile Services Business Connectivity Services Managed Metadata Service Subscription Settings Service Visio Graphics Service Secure Store Service State Service Web Analytics Service State Service Word Automation Service Subscription Settings Service

Possible Topology SharePoint Web Services Application pool Application pool Service apps Service applications Web App 1 Web App 2 Web App 3 Application pool Application pool Custom Default group group

Physical Architecture

Security and Authentication • Claims based • Windows Authentication both inside and outside the firewall • Microsoft ISA Server 2006 provides an HTML login page • Envision IT Extranet User Manager provides external user account setup, password management, and lost password retrieval • Future plans are to move to Forefront Threat Management Gateway for outbound and Unified Access Gateway for inbound • Forefront Protection 2010 for SharePoint

SharePoint Accounts Account Details Setup User Account Used to run setup and the product config wizard Farm Account Central Admin App Pool Microsoft SharePoint Foundation Workflow Timer Service Services Account Central Admin App Pool Secure App Pool MySite App Pool Search Service Account Read only content access account User Profile Sync Services Account Account used to connect to the domain to retrieve AD information. Needs replicate directory changes permission to each import domain Portal Super User Portal Super Reader Secure Store Account(s) used to access back end systems and data stores

Installation • Installed using AutoSPInstaller • http://autospinstaller.codeplex.com/ • Repeatable, scripted install • Can be restarted midway • Will install the binaries, including service packs and language packs • Provides standardized naming for all SharePoint databases • Driven off a single SetInputs.xml file • Product ID is set in the config.xml

General Configuration • Farm Configuration Wizard • Create and assign domain certificates • Create the top-level site collection • Configure outgoing email settings • Activate the Office Web Apps feature in each site collection • Allow all site templates • Setup Excel Services • Activate the SharePoint Server Enterprise Site Collection features

File Handling • Set permissive file handling on the web apps • http://www.sharepointedutech.com/2010/05/05/opening- pdfs-in-sharepoint-2010 • Set the PDF file icon to show • http://www.sharepointedutech.com/2010/02/17/changing- file-associations-icons-in-sharepoint-2010 • Add the ICPDF.GIF file to the C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\IMAGES folder • Add the <Mapping Key="pdf" Value="ICPDF.gif" OpenControl=""/> line to the C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\XML\DOCICON.XML file • IISReset to see the changes • Do the same for MindManager and Balsamiq

Profile Import • Manage User Profile Service • Configure synchronization connections • http://blogs.msdn.com/b/spses/archive/2010/04/01/sharepoint- 2010-provisioning-user-profile-synchronization.aspx • Provision the directory sync account • Replicate directory changes permission to each import domain NC • http://support.microsoft.com/kb/303972 • Start a full profile synchronization • Setup a content source for sps3:// for the people search • Do a full search crawl

Business Connectivity Services • Manage the Secure Store Service • http://technet.microsoft.com/en-us/library/ee806866.aspx • http://blogs.msdn.com/b/sridhara/archive/2010/01/27/setting- up-bcs-with-secure-store-application-impersonation.aspx • Generate New Key • Create new Target Application • Target application type of Group • Set the members to the group(s) that will map to these credentials • Set the credentials • Manage the Business Data Connectivity Service application • Set Metadata Store Permissions to grant permissions to the user creating the external content type

Business Connectivity Services • Add a new connection of data type SQL Server • Set the database server and database names • Connect with Impersonated Windows Users Identity • SSID matches the target application set in the Secure Store Service • Select the table or view • Create a new Read Item and Read List operations